unesbox[.]com

Analysis of the domain unesbox.com indicates it was associated with a crypto-based gambling scam, specifically classified as a 'Gambler Scam' phishing kit. The domain was registered on May 21, 2025, through Web Commerce Communications Limited and resolved to the IP address 69.5.189.54, hosted on AS42624 (Global-Data System IT Corporation) in Switzerland. As of July 23, 2026, the domain is offline, though it was previously flagged by 15 of 95 security vendors on VirusTotal and appears on one security blocklist, including PhishDestroy. The page title, 'UNESBOX | Play at the best online casino based on Blockchain,' explicitly identifies the site as a blockchain gambling platform, aligning with the reported scam type of a crypto scam.

No SSL certificate was detected, and the domain used nameservers ns1.nameserverhub.com through ns4.nameserverhub.com. AlienVault OTX recorded the domain in one threat intelligence pulse, while Gridinsoft assigned it a trust score of 1 out of 100, further corroborating its malicious classification. Defenders should treat this domain as high-risk infrastructure, particularly for crypto-related fraud.

While the site is currently offline, historical associations with known phishing kits and detection by multiple security vendors suggest it was actively used for malicious purposes. Organizations should monitor for any resurgence of activity, block the domain and its associated IP at perimeter controls, and review logs for prior connections to this infrastructure. The lack of SSL and low trust scores reinforce the need for caution, though the exact content and functionality of the site remain unconfirmed due to its offline status.